CVE-2026-11800 - Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion
CVE ID :CVE-2026-11800 Published : June 25, 2026, 8:57 p.m. | 2 hours, 14 minutes ago Description :A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature verification. By...